Vulnerability Details CVE-2003-1488
The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.1%
CVSS Severity
CVSS v2 Score 6.4
References
- http://marc.info/?l=vulnwatch&m=105128431109082&w=2
- http://secunia.com/advisories/8683
- http://www.securityfocus.com/bid/7427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11886
- http://marc.info/?l=vulnwatch&m=105128431109082&w=2
- http://secunia.com/advisories/8683
- http://www.securityfocus.com/bid/7427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11886
Products affected by CVE-2003-1488
-
cpe:2.3:a:truelogik:truegalerie:1.0